5784 matches found
CVE-2015-2845
creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36807 2017-07-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42296 2018-05-29 15:50:33+00:00| seen|...
FreeBSD : sqlite -- multiple vulnerabilities (dec3164f-3121-45ef-af18-bb113ac5082f)
NVD reports : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, ...
[USN-2569-2] Apport vulnerability
========================================================================== Ubuntu Security Notice USN-2569-2 April 16, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
Fedora abrt Race Condition Exploit
Exploit for linux platform in category local exploits include include include include include include include include include include include include include include include // // This is a race condition exploit for CVE-2015-1862, targeting Fedora. // // Note: It can take a few minutes to win th...
CVE-2015-2165
Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...
PT-2015-5866
Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Description The issue allows remote attackers to obtain sensitive information by making a direct request to certain files. This includes accessing Web Security incident reports or the Explorer...
CVE-2014-9711
Websense TRITON products prior to patching show a documented XSS flaw (CVE-2014-9711) in Investigative Reports. Specifically, versions Websense TRITON AP-WEB before 8.0.0 and Web Security components (Web Security and Filter, Web Security Gateway, Web Security Gateway Anywhere) prior to Hotfix 02 ...
Missing access control on Websense Explorer web folder
------------------------------------------------------------------------ Missing access control on Websense Explorer web folder ------------------------------------------------------------------------ Han Sahin, September 2014 ----------------------------------------------------------------------...
SS-2016-012: Missing ACL on reports
More info at https://www.silverstripe.org/download/security-releases/ss-2016-012/...
Websense Explorer Missing Access Control
------------------------------------------------------------------------ Missing access control on Websense Explorer web folder ------------------------------------------------------------------------ Han Sahin, September 2014 ----------------------------------------------------------------------...
CVE-2015-1427
creationtimestamp| type| source ---|---|--- 2015-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36337 2015-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36415 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162...
WordPress plugin WooCommerce cross-site scripting vulnerability (CNVD-2015-01281)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WooCommerce is one of the e-commerce plug-ins. A cross-site scripting vulnerability exists in WordPress WooCommerce...
CVE-2015-2069
Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING in the wc-reports page to wp-admin/admin.php...
PT-2015-5582
Name of the Vulnerable Software and Affected Versions WooCommerce plugin versions prior to 2.2.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING in the "wc-reports" page to "wp-admin/admin.php". Recommendations For...
CVE-2015-2069: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING in the wc-reports page to wp-admin/admin.php...
Open Source Log Analysis: GoAccess
GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in nix systems . It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. Features GoAccess parses the specified web log file and...
IBM Tivoli Endpoint Manager Web Reports Component Cross-Site Scripting Vulnerability
IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. A cross-site scripting vulnerability in the Web Reports component of IBM Tivoli Endpoint Manager version 9.1.1229 prior to 9.1 can be exploited b...
CVE-2014-6113
Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6113
Cross-site scripting XSS vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...